temper-rb 0.6.2 → 0.6.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1b400756c3ab5be3f484aa137cb20ea59a082bb82715721b30dcc2c131ccef75
-  data.tar.gz: adee58c5b1ad0b68738785be9f21bf90328b23b20b0be13443f39e460fa46a8d
+  metadata.gz: b50346a39dce4ae32bb014d28b4a11d6561131e271a3dec25f986c7ecc0ea0f9
+  data.tar.gz: 552a9feaa8a06c21f3279cef4cc647a4890e063a2f6e16350dbebdc704eac7a8
 SHA512:
-  metadata.gz: 5e644655086436e9b3a5a42c86794090542efdf2ace6500287c4dd225d4a8e282282f0c19a4c9ef33a5e2ebd74772e12a93d73f8f1b3bcc9f845c616718e093b
-  data.tar.gz: f5b4d39c9e6442f1dd52f200a9cfe94002cb4b22907b3d6b90e4c3dc2d5db494026f6bd88ed8ede0b40b5bccf56760c7d96a26fc4e282e587752d3b649b5c308
+  metadata.gz: eb4ae4b48f323fad2c06bbd8f179860fbe70642961e462eee41ea524b0ddab28f7812b891877115bc5cfc8096031cfce05dd46203852848490cc39ffdd5509e2
+  data.tar.gz: 19e8458c9dbd421c955aeba8f3c5f4c41b485598bc291c1a031652932ce0aab68e2397427cd20d3f1080b9ca56b7e7e7d663e280706c2f1c80e2719b6bf8dfee

data/lib/temper/generated/api/access_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/admin_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -1152,7 +1152,7 @@ module Temper::Generated
     end
 
     # Rebind a machine client to a new client ID
-    # Points a fresh IdP `client_id` at the agent profile an existing machine client holds; by default the old client is revoked in the same transaction. The path `{id}` names the source client. Requires a system admin. Refused for a temper-issued source client, whose secret is rotated instead, and on an instance that runs temper's own authorization server.
+    # Points a fresh IdP `client_id` at the agent profile an existing machine client holds; by default the old client is revoked in the same transaction. When the machine sits on a person's personal team and anyone but that person makes this credential, the machine is removed from that personal team in the same transaction. The path `{id}` names the source client. Requires a system admin. Refused for a temper-issued source client, whose secret is rotated instead, and on an instance that runs temper's own authorization server.
     # @param id [String] The machine client whose profile the new client id inherits
     # @param rebind_machine_request [RebindMachineRequest] 
     # @param [Hash] opts the optional parameters
@@ -1164,7 +1164,7 @@ module Temper::Generated
     end
 
     # Rebind a machine client to a new client ID
-    # Points a fresh IdP `client_id` at the agent profile an existing machine client holds; by default the old client is revoked in the same transaction. The path `{id}` names the source client. Requires a system admin. Refused for a temper-issued source client, whose secret is rotated instead, and on an instance that runs temper's own authorization server.
+    # Points a fresh IdP `client_id` at the agent profile an existing machine client holds; by default the old client is revoked in the same transaction. When the machine sits on a person's personal team and anyone but that person makes this credential, the machine is removed from that personal team in the same transaction. The path `{id}` names the source client. Requires a system admin. Refused for a temper-issued source client, whose secret is rotated instead, and on an instance that runs temper's own authorization server.
     # @param id [String] The machine client whose profile the new client id inherits
     # @param rebind_machine_request [RebindMachineRequest] 
     # @param [Hash] opts the optional parameters

data/lib/temper/generated/api/admin_ledger_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -20,7 +20,7 @@ module Temper::Generated
       @api_client = api_client
     end
     # Read the admin ledger
-    # Returns a page of recorded administrative acts, newest first, on exactly one axis. `subject` (`<kind>:<uuid>`, e.g. `kb_resources:<uuid>`) returns the acts performed on that subject, limited to the act families the caller may read about it: a system admin reads all of them, a caller who may administer grants on the subject reads its grant acts, and an owner or maintainer of a team (`kb_teams:<uuid>`) reads that team's membership changes (on the gating team, only a system admin does). `actor` returns the acts a profile performed: any caller may read their own, and only a system admin may read another's. A read the caller is not allowed is answered 404, not 403, so a refusal reveals nothing about the subject. `epoch` is when recording began; acts before it were not recorded. `limit` defaults to 50 and is capped at 200.
+    # Returns a page of recorded administrative acts, newest first, on exactly one axis. `subject` (`<kind>:<uuid>`, e.g. `kb_resources:<uuid>`) returns the acts performed on that subject, limited to the act families the caller may read about it: a system admin reads all of them except grant acts on someone else's personal context or a resource homed in one, a caller who may administer grants on the subject reads its grant acts, and an owner or maintainer of a team (`kb_teams:<uuid>`) reads that team's membership changes and the linking or detaching of its child teams (on the gating team and temper-system, only a system admin does). `actor` returns the acts a profile performed: any caller may read their own, and only a system admin may read another's, without the grant acts that fall in someone else's personal space. A read the caller is not allowed is answered 404, not 403, so a refusal reveals nothing about the subject. `epoch` is when recording began; acts before it were not recorded. `limit` defaults to 50 and is capped at 200.
     # @param [Hash] opts the optional parameters
     # @option opts [String] :subject Subject axis: &#x60;&lt;kind&gt;:&lt;uuid&gt;&#x60;, e.g. &#x60;kb_resources:0199c3f1-...&#x60;.
     # @option opts [String] :actor Actor axis: whose acts to read. Reading your own is always allowed; reading another profile&#39;s requires a system admin.
@@ -34,7 +34,7 @@ module Temper::Generated
     end
 
     # Read the admin ledger
-    # Returns a page of recorded administrative acts, newest first, on exactly one axis. &#x60;subject&#x60; (&#x60;&lt;kind&gt;:&lt;uuid&gt;&#x60;, e.g. &#x60;kb_resources:&lt;uuid&gt;&#x60;) returns the acts performed on that subject, limited to the act families the caller may read about it: a system admin reads all of them, a caller who may administer grants on the subject reads its grant acts, and an owner or maintainer of a team (&#x60;kb_teams:&lt;uuid&gt;&#x60;) reads that team&#39;s membership changes (on the gating team, only a system admin does). &#x60;actor&#x60; returns the acts a profile performed: any caller may read their own, and only a system admin may read another&#39;s. A read the caller is not allowed is answered 404, not 403, so a refusal reveals nothing about the subject. &#x60;epoch&#x60; is when recording began; acts before it were not recorded. &#x60;limit&#x60; defaults to 50 and is capped at 200.
+    # Returns a page of recorded administrative acts, newest first, on exactly one axis. &#x60;subject&#x60; (&#x60;&lt;kind&gt;:&lt;uuid&gt;&#x60;, e.g. &#x60;kb_resources:&lt;uuid&gt;&#x60;) returns the acts performed on that subject, limited to the act families the caller may read about it: a system admin reads all of them except grant acts on someone else&#39;s personal context or a resource homed in one, a caller who may administer grants on the subject reads its grant acts, and an owner or maintainer of a team (&#x60;kb_teams:&lt;uuid&gt;&#x60;) reads that team&#39;s membership changes and the linking or detaching of its child teams (on the gating team and temper-system, only a system admin does). &#x60;actor&#x60; returns the acts a profile performed: any caller may read their own, and only a system admin may read another&#39;s, without the grant acts that fall in someone else&#39;s personal space. A read the caller is not allowed is answered 404, not 403, so a refusal reveals nothing about the subject. &#x60;epoch&#x60; is when recording began; acts before it were not recorded. &#x60;limit&#x60; defaults to 50 and is capped at 200.
     # @param [Hash] opts the optional parameters
     # @option opts [String] :subject Subject axis: &#x60;&lt;kind&gt;:&lt;uuid&gt;&#x60;, e.g. &#x60;kb_resources:0199c3f1-...&#x60;.
     # @option opts [String] :actor Actor axis: whose acts to read. Reading your own is always allowed; reading another profile&#39;s requires a system admin.

data/lib/temper/generated/api/auditor_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/blobs_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/cognitive_maps_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/connections_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -20,7 +20,7 @@ module Temper::Generated
       @api_client = api_client
     end
     # Attach a connection credential
-    # Attaches the credential reference: a broker and a connector the broker holds the secret for. The body carries no secret. temper mints once to verify the connector and reports what it observed; a connector the broker rejects fails the request, while pending consent, an unconfigured broker, or a broker failure is reported in `verification.note`. The broker's own error text goes to the server log, never to the response. Requires a system admin or the owner of the connection's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Attaches the credential reference: a broker and a connector the broker holds the secret for. The body carries no secret. temper mints once to verify the connector and reports what it observed; a connector the broker rejects fails the request, while pending consent, an unconfigured broker, or a broker failure is reported in `verification.note`. The broker's own error text goes to the server log, never to the response. Requires a system admin or the owner of the connection's owning team; on someone else's personal team, only its owner. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param connection_credential [ConnectionCredential] 
     # @param [Hash] opts the optional parameters
@@ -32,7 +32,7 @@ module Temper::Generated
     end
 
     # Attach a connection credential
-    # Attaches the credential reference: a broker and a connector the broker holds the secret for. The body carries no secret. temper mints once to verify the connector and reports what it observed; a connector the broker rejects fails the request, while pending consent, an unconfigured broker, or a broker failure is reported in `verification.note`. The broker's own error text goes to the server log, never to the response. Requires a system admin or the owner of the connection's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Attaches the credential reference: a broker and a connector the broker holds the secret for. The body carries no secret. temper mints once to verify the connector and reports what it observed; a connector the broker rejects fails the request, while pending consent, an unconfigured broker, or a broker failure is reported in `verification.note`. The broker's own error text goes to the server log, never to the response. Requires a system admin or the owner of the connection's owning team; on someone else's personal team, only its owner. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param connection_credential [ConnectionCredential] 
     # @param [Hash] opts the optional parameters
@@ -101,7 +101,7 @@ module Temper::Generated
     end
 
     # Get a connection
-    # Returns one connection. Requires a system admin or the owner of the connection's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Returns one connection. Requires a system admin or the owner of the connection's owning team; on someone else's personal team only its owner, a system admin included. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param [Hash] opts the optional parameters
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -112,7 +112,7 @@ module Temper::Generated
     end
 
     # Get a connection
-    # Returns one connection. Requires a system admin or the owner of the connection's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Returns one connection. Requires a system admin or the owner of the connection's owning team; on someone else's personal team only its owner, a system admin included. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param [Hash] opts the optional parameters
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -171,7 +171,7 @@ module Temper::Generated
     end
 
     # Grant a team read-reach on a connection
-    # Lets the members of `team` read what the connection receives. Reach is read-only. Requires a system admin, or the owner of the connection's owning team who also owns or maintains the receiving team. When the connection declares a remote reach the attach-time verification did not confirm, `affirm_reach` must state why the binding is intended; it is refused when there is nothing to affirm. A caller with system access who does not control the connection is answered 404, exactly as for an id that does not exist.
+    # Lets the members of `team` read what the connection receives. Reach is read-only. Requires a system admin (only its owner, on someone else's personal team), or the owner of the connection's owning team who also owns or maintains the receiving team. No one may bind reach to someone else's personal team. A team owner who is not a system admin may bind it to their own personal team only when that personal team owns the connection. When the connection declares a remote reach the attach-time verification did not confirm, `affirm_reach` must state why the binding is intended; it is refused when there is nothing to affirm. A caller with system access who does not control the connection is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param grant_connection_reach_request [GrantConnectionReachRequest] 
     # @param [Hash] opts the optional parameters
@@ -183,7 +183,7 @@ module Temper::Generated
     end
 
     # Grant a team read-reach on a connection
-    # Lets the members of `team` read what the connection receives. Reach is read-only. Requires a system admin, or the owner of the connection's owning team who also owns or maintains the receiving team. When the connection declares a remote reach the attach-time verification did not confirm, `affirm_reach` must state why the binding is intended; it is refused when there is nothing to affirm. A caller with system access who does not control the connection is answered 404, exactly as for an id that does not exist.
+    # Lets the members of `team` read what the connection receives. Reach is read-only. Requires a system admin (only its owner, on someone else's personal team), or the owner of the connection's owning team who also owns or maintains the receiving team. No one may bind reach to someone else's personal team. A team owner who is not a system admin may bind it to their own personal team only when that personal team owns the connection. When the connection declares a remote reach the attach-time verification did not confirm, `affirm_reach` must state why the binding is intended; it is refused when there is nothing to affirm. A caller with system access who does not control the connection is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param grant_connection_reach_request [GrantConnectionReachRequest] 
     # @param [Hash] opts the optional parameters
@@ -252,7 +252,7 @@ module Temper::Generated
     end
 
     # List connections
-    # Lists the connections the caller may manage, newest first. A system admin sees every connection; any other caller sees only those owned by a team they own. Revoked connections are omitted unless `include_revoked` is set.
+    # Lists the connections the caller may manage, newest first. A system admin sees every connection but those of someone else's personal team; any other caller sees only those owned by a team they own. Revoked connections are omitted unless `include_revoked` is set.
     # @param [Hash] opts the optional parameters
     # @option opts [Boolean] :include_revoked Include revoked connections. Default `false`.
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -263,7 +263,7 @@ module Temper::Generated
     end
 
     # List connections
-    # Lists the connections the caller may manage, newest first. A system admin sees every connection; any other caller sees only those owned by a team they own. Revoked connections are omitted unless `include_revoked` is set.
+    # Lists the connections the caller may manage, newest first. A system admin sees every connection but those of someone else's personal team; any other caller sees only those owned by a team they own. Revoked connections are omitted unless `include_revoked` is set.
     # @param [Hash] opts the optional parameters
     # @option opts [Boolean] :include_revoked Include revoked connections. Default `false`.
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -319,7 +319,7 @@ module Temper::Generated
     end
 
     # Provision a connection
-    # Provisions a connection to a remote system, with its own agent profile, emitter and home context. It starts with no credential and with no webhook events or tool manifest; each is attached by its own call. Requires a system admin or the owner of `owner_team_id`; a connection with no owning team can only be provisioned by a system admin. Owning a connection does not grant any team read-reach on it.
+    # Provisions a connection to a remote system, with its own agent profile, emitter and home context. It starts with no credential and with no webhook events or tool manifest; each is attached by its own call. Requires a system admin (only its owner, on someone else's personal team) or the owner of `owner_team_id`; a connection with no owning team can only be provisioned by a system admin. Owning a connection does not grant any team read-reach on it.
     # @param provision_connection_request [ProvisionConnectionRequest] 
     # @param [Hash] opts the optional parameters
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -330,7 +330,7 @@ module Temper::Generated
     end
 
     # Provision a connection
-    # Provisions a connection to a remote system, with its own agent profile, emitter and home context. It starts with no credential and with no webhook events or tool manifest; each is attached by its own call. Requires a system admin or the owner of `owner_team_id`; a connection with no owning team can only be provisioned by a system admin. Owning a connection does not grant any team read-reach on it.
+    # Provisions a connection to a remote system, with its own agent profile, emitter and home context. It starts with no credential and with no webhook events or tool manifest; each is attached by its own call. Requires a system admin (only its owner, on someone else's personal team) or the owner of `owner_team_id`; a connection with no owning team can only be provisioned by a system admin. Owning a connection does not grant any team read-reach on it.
     # @param provision_connection_request [ProvisionConnectionRequest] 
     # @param [Hash] opts the optional parameters
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -394,7 +394,7 @@ module Temper::Generated
     end
 
     # Revoke a connection
-    # Revokes a connection so temper mints no new tokens for it. Tokens already minted stay valid at the remote system until they expire. The connection's profile, emitter and history are kept. Revoking an already-revoked connection returns it unchanged. Requires a system admin or the owner of the connection's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Revokes a connection so temper mints no new tokens for it. Tokens already minted stay valid at the remote system until they expire. The connection's profile, emitter and history are kept. Revoking an already-revoked connection returns it unchanged. Requires a system admin or the owner of the connection's owning team; on someone else's personal team, only its owner. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param [Hash] opts the optional parameters
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -405,7 +405,7 @@ module Temper::Generated
     end
 
     # Revoke a connection
-    # Revokes a connection so temper mints no new tokens for it. Tokens already minted stay valid at the remote system until they expire. The connection's profile, emitter and history are kept. Revoking an already-revoked connection returns it unchanged. Requires a system admin or the owner of the connection's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Revokes a connection so temper mints no new tokens for it. Tokens already minted stay valid at the remote system until they expire. The connection's profile, emitter and history are kept. Revoking an already-revoked connection returns it unchanged. Requires a system admin or the owner of the connection's owning team; on someone else's personal team, only its owner. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param [Hash] opts the optional parameters
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -464,7 +464,7 @@ module Temper::Generated
     end
 
     # Revoke a team's read-reach on a connection
-    # Removes the read-reach grant for `team`. Revoking an absent grant is a no-op. `affirm_reach` is ignored. Requires a system admin or the owner of the connection's owning team; no role on the receiving team is needed. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Removes the read-reach grant for `team`. Revoking an absent grant is a no-op. `affirm_reach` is ignored. Requires a system admin (only its owner, on someone else's personal team) or the owner of the connection's owning team; no role on the receiving team is needed. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param grant_connection_reach_request [GrantConnectionReachRequest] 
     # @param [Hash] opts the optional parameters
@@ -476,7 +476,7 @@ module Temper::Generated
     end
 
     # Revoke a team's read-reach on a connection
-    # Removes the read-reach grant for `team`. Revoking an absent grant is a no-op. `affirm_reach` is ignored. Requires a system admin or the owner of the connection's owning team; no role on the receiving team is needed. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Removes the read-reach grant for `team`. Revoking an absent grant is a no-op. `affirm_reach` is ignored. Requires a system admin (only its owner, on someone else's personal team) or the owner of the connection's owning team; no role on the receiving team is needed. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param grant_connection_reach_request [GrantConnectionReachRequest] 
     # @param [Hash] opts the optional parameters
@@ -545,7 +545,7 @@ module Temper::Generated
     end
 
     # Set connection tool manifest
-    # Replaces the declared read-only remote tools. A non-empty manifest makes the connection reach-capable. Requires a system admin or the owner of the connection's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Replaces the declared read-only remote tools. A non-empty manifest makes the connection reach-capable. Requires a system admin or the owner of the connection's owning team; on someone else's personal team, only its owner. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param set_tool_manifest_request [SetToolManifestRequest] 
     # @param [Hash] opts the optional parameters
@@ -557,7 +557,7 @@ module Temper::Generated
     end
 
     # Set connection tool manifest
-    # Replaces the declared read-only remote tools. A non-empty manifest makes the connection reach-capable. Requires a system admin or the owner of the connection's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Replaces the declared read-only remote tools. A non-empty manifest makes the connection reach-capable. Requires a system admin or the owner of the connection's owning team; on someone else's personal team, only its owner. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param set_tool_manifest_request [SetToolManifestRequest] 
     # @param [Hash] opts the optional parameters
@@ -626,7 +626,7 @@ module Temper::Generated
     end
 
     # Set connection webhook events
-    # Replaces the set of remote event types the connection receives. A non-empty set makes the connection ledger-capable. Requires a system admin or the owner of the connection's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Replaces the set of remote event types the connection receives. A non-empty set makes the connection ledger-capable. Requires a system admin or the owner of the connection's owning team; on someone else's personal team, only its owner. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param set_webhook_events_request [SetWebhookEventsRequest] 
     # @param [Hash] opts the optional parameters
@@ -638,7 +638,7 @@ module Temper::Generated
     end
 
     # Set connection webhook events
-    # Replaces the set of remote event types the connection receives. A non-empty set makes the connection ledger-capable. Requires a system admin or the owner of the connection's owning team. Any other caller with system access is answered 404, exactly as for an id that does not exist.
+    # Replaces the set of remote event types the connection receives. A non-empty set makes the connection ledger-capable. Requires a system admin or the owner of the connection's owning team; on someone else's personal team, only its owner. Any other caller with system access is answered 404, exactly as for an id that does not exist.
     # @param id [String] Connection ID
     # @param set_webhook_events_request [SetWebhookEventsRequest] 
     # @param [Hash] opts the optional parameters

data/lib/temper/generated/api/contexts_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/data_artifact_shapes_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -181,8 +181,8 @@ module Temper::Generated
       return data, status_code, headers
     end
 
-    # Get a single shape by ID.
-    # Visibility-gated: returns 404 if the shape does not exist or its owning home anchor is not readable to the caller. Includes folded shapes (audit/history).
+    # Get a single shape by ID, with what an ask may name
+    # `askable` lists every path an artifact ask may name against the shape.  Visibility-gated: returns 404 if the shape does not exist or its owning home anchor is not readable to the caller. Includes folded shapes (audit/history). The listing routes leave `askable` absent.
     # @param shape_id [String] Shape ID
     # @param [Hash] opts the optional parameters
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
@@ -192,8 +192,8 @@ module Temper::Generated
       data
     end
 
-    # Get a single shape by ID.
-    # Visibility-gated: returns 404 if the shape does not exist or its owning home anchor is not readable to the caller. Includes folded shapes (audit/history).
+    # Get a single shape by ID, with what an ask may name
+    # `askable` lists every path an artifact ask may name against the shape.  Visibility-gated: returns 404 if the shape does not exist or its owning home anchor is not readable to the caller. Includes folded shapes (audit/history). The listing routes leave `askable` absent.
     # @param shape_id [String] Shape ID
     # @param [Hash] opts the optional parameters
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.

data/lib/temper/generated/api/data_artifacts_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0
@@ -19,6 +19,81 @@ module Temper::Generated
     def initialize(api_client = ApiClient.default)
       @api_client = api_client
     end
+    # Read the artifacts one ask matches, whole
+    # The body is one ask — a shape by id and predicates over the paths that shape declares — with an optional `limit` and the previous page's `next` as `after`. The answer is the artifacts the ask matches among those you can see, each whole (`content` is the stored content, absent for an artifact committed with no bytes), in `(created, artifact_id)` order, oldest first. POST, because the ask is a document rather than a query string.  Every page is bounded three ways, and the first bound reached ends it: by `limit` (absent: 50; at least 1 and at most 200), by a byte budget over what the page sends, and by a budget over what it may read to find its rows. A matching artifact too large for any page, or too deeply nested for one (content more than 96 arrays or objects deep, so that every first-party client parses every page), is named in `oversized`, in order, by id and size, and the page goes on. Read it whole by id (`GET /api/data-artifacts/{artifact_id}`); a client's own nesting limit can refuse that read too when the content nests very deeply, and on the hosted deployment it is refused when the response carrying the artifact, with its content as storage serves it, is longer than the platform's response cap (storage prints some numbers longer than they were committed). When the read budget ends a page, `next` is the last artifact it read, matched or not, so a page can carry no artifacts and still a `next`: only `next: null` ends the enumeration. Continue by sending the same ask with `next` as `after`; every page validates the ask again for its caller, so the position carries no authority.  `population` counts the ask's whole governed population on the first page and is `null` after it. Those counts are exact, so the first page matches every governed artifact of the home to make them; the read budget bounds the page's rows, not the counts. A continuation is validated against the shape version the first page named, but its rows' `shape_state`, and any `shape_states` narrowing, are read against the version now in force: when `amended_since` appears, an ask narrowed by `shape_states` should start again from a first page asking that version. A first page (no `after`) naming a superseded version is refused `shape_superseded`.  This is an enumeration: an artifact on a resource still ingesting, or one an operator ended, is not in it, though `GET /api/resources/{id}/artifacts` addressed to that resource lists it. It never returns resources, and it is not a stage of `/api/query`. A `GET` to this path is answered by the caller checks before the route: `401` without credentials, `403` without system access, and `405` to a caller with both.
+    # @param ask_request [AskRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [AskResponse]
+    def ask_data_artifacts(ask_request, opts = {})
+      data, _status_code, _headers = ask_data_artifacts_with_http_info(ask_request, opts)
+      data
+    end
+
+    # Read the artifacts one ask matches, whole
+    # The body is one ask — a shape by id and predicates over the paths that shape declares — with an optional `limit` and the previous page's `next` as `after`. The answer is the artifacts the ask matches among those you can see, each whole (`content` is the stored content, absent for an artifact committed with no bytes), in `(created, artifact_id)` order, oldest first. POST, because the ask is a document rather than a query string.  Every page is bounded three ways, and the first bound reached ends it: by `limit` (absent: 50; at least 1 and at most 200), by a byte budget over what the page sends, and by a budget over what it may read to find its rows. A matching artifact too large for any page, or too deeply nested for one (content more than 96 arrays or objects deep, so that every first-party client parses every page), is named in `oversized`, in order, by id and size, and the page goes on. Read it whole by id (`GET /api/data-artifacts/{artifact_id}`); a client's own nesting limit can refuse that read too when the content nests very deeply, and on the hosted deployment it is refused when the response carrying the artifact, with its content as storage serves it, is longer than the platform's response cap (storage prints some numbers longer than they were committed). When the read budget ends a page, `next` is the last artifact it read, matched or not, so a page can carry no artifacts and still a `next`: only `next: null` ends the enumeration. Continue by sending the same ask with `next` as `after`; every page validates the ask again for its caller, so the position carries no authority.  `population` counts the ask's whole governed population on the first page and is `null` after it. Those counts are exact, so the first page matches every governed artifact of the home to make them; the read budget bounds the page's rows, not the counts. A continuation is validated against the shape version the first page named, but its rows' `shape_state`, and any `shape_states` narrowing, are read against the version now in force: when `amended_since` appears, an ask narrowed by `shape_states` should start again from a first page asking that version. A first page (no `after`) naming a superseded version is refused `shape_superseded`.  This is an enumeration: an artifact on a resource still ingesting, or one an operator ended, is not in it, though `GET /api/resources/{id}/artifacts` addressed to that resource lists it. It never returns resources, and it is not a stage of `/api/query`. A `GET` to this path is answered by the caller checks before the route: `401` without credentials, `403` without system access, and `405` to a caller with both.
+    # @param ask_request [AskRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are `cli` and `sdk`; an absent or unrecognized value attributes the write to `web`. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
+    # @return [Array<(AskResponse, Integer, Hash)>] AskResponse data, response status code and response headers
+    def ask_data_artifacts_with_http_info(ask_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: DataArtifactsApi.ask_data_artifacts ...'
+      end
+      # verify the required parameter 'ask_request' is set
+      if @api_client.config.client_side_validation && ask_request.nil?
+        fail ArgumentError, "Missing the required parameter 'ask_request' when calling DataArtifactsApi.ask_data_artifacts"
+      end
+      allowable_values = ["cli", "sdk"]
+      if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
+        fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
+      end
+      # resource path
+      local_var_path = '/api/data-artifacts/ask'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'X-Temper-Surface'] = opts[:'x_temper_surface'] if !opts[:'x_temper_surface'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(ask_request)
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'AskResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['bearer_auth']
+
+      new_options = opts.merge(
+        :operation => :"DataArtifactsApi.ask_data_artifacts",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: DataArtifactsApi#ask_data_artifacts\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Commit one data artifact to a resource
     # The content payload is JSON, hashed and stored verbatim. The hash is the proof — the ledger carries only the hash, never the bytes. Auth-gated: the caller must have write standing on the owning resource.
     # @param id [String] Resource ID (the artifact&#39;s owner)
@@ -247,13 +322,17 @@ module Temper::Generated
     end
 
     # List artifacts for a resource, or counts with counts=true
-    # Without `counts=true`: returns fully hydrated artifacts (metadata + content). With `counts=true`: returns per-family counts only, no content hydration — for surfaces that need \"3 measurements, 1 extraction\" without fetching payloads.
+    # Without `counts=true`: returns fully hydrated artifacts (metadata + content). With `counts=true`: returns per-family counts only, no content hydration — for surfaces that need \"3 measurements, 1 extraction\" without fetching payloads.  With `limit`, returns at most that many artifacts in `(created, id)` order: oldest first, or newest first with `order=desc`. The body is the same bare array either way; when more remain, the response carries a `Link: <...>; rel=\"next\"` header whose target is this request with the next page's `after_created` and `after_id` (and the caller's own filters and `order`), and the header is absent on the last page and on every response without `limit`. A `limit` of 0 or above the server ceiling `MAX_ARTIFACT_PAGE_ROWS` is refused, not clamped. Without `limit`, returns the whole list: the unbounded form, which a later release retires.
     # @param id [String] Resource ID
     # @param [Hash] opts the optional parameters
     # @option opts [String] :kind Filter by the bare family name (e.g. &#x60;\&quot;measurement\&quot;&#x60;).
     # @option opts [String] :intent Filter by selection intent: &#x60;\&quot;current\&quot;&#x60;, &#x60;\&quot;member\&quot;&#x60;, or &#x60;\&quot;pinned\&quot;&#x60;.
     # @option opts [Boolean] :include_folded Include folded (superseded) artifacts in the result. Default: &#x60;false&#x60;.
-    # @option opts [Boolean] :counts Return per-family counts instead of full artifacts. No content hydration. Default: &#x60;false&#x60; (full artifacts with content).
+    # @option opts [Boolean] :counts Return per-family counts instead of full artifacts. No content hydration. Default: &#x60;false&#x60; (full artifacts with content). Counts are not paged: &#x60;limit&#x60; and &#x60;after_*&#x60; are not read when this is set.
+    # @option opts [Integer] :limit Return at most this many artifacts. The body is still the bare array; when more remain, the response carries a &#x60;Link: &lt;...&gt;; rel&#x3D;\&quot;next\&quot;&#x60; header whose target is this request with the next page&#39;s position, and the header is absent on the last page. Must be at least 1 and at most the server ceiling &#x60;MAX_ARTIFACT_PAGE_ROWS&#x60;, which is 200; a value outside that range is refused, never clamped. Omit it to receive the whole list (the unbounded form, which a later release retires).
+    # @option opts [Time] :after_created Continue after this position: the &#x60;after_created&#x60; of the previous page&#39;s &#x60;Link&#x60; target. Send together with &#x60;after_id&#x60;, and only with &#x60;limit&#x60;.
+    # @option opts [String] :after_id Continue after this position: the &#x60;after_id&#x60; of the previous page&#39;s &#x60;Link&#x60; target. Send together with &#x60;after_created&#x60;, and only with &#x60;limit&#x60;.
+    # @option opts [SortOrder] :order The direction of a bounded read over &#x60;(created, id)&#x60;: &#x60;asc&#x60;, oldest first, or &#x60;desc&#x60;, newest first. Absent is &#x60;asc&#x60;. Only with &#x60;limit&#x60;; the &#x60;Link&#x60; target carries it, so every page continues in the direction the first was asked in. Any other value is refused.
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
     # @return [Array<ArtifactView>]
     def list_artifacts(id, opts = {})
@@ -262,13 +341,17 @@ module Temper::Generated
     end
 
     # List artifacts for a resource, or counts with counts&#x3D;true
-    # Without &#x60;counts&#x3D;true&#x60;: returns fully hydrated artifacts (metadata + content). With &#x60;counts&#x3D;true&#x60;: returns per-family counts only, no content hydration — for surfaces that need \&quot;3 measurements, 1 extraction\&quot; without fetching payloads.
+    # Without &#x60;counts&#x3D;true&#x60;: returns fully hydrated artifacts (metadata + content). With &#x60;counts&#x3D;true&#x60;: returns per-family counts only, no content hydration — for surfaces that need \&quot;3 measurements, 1 extraction\&quot; without fetching payloads.  With &#x60;limit&#x60;, returns at most that many artifacts in &#x60;(created, id)&#x60; order: oldest first, or newest first with &#x60;order&#x3D;desc&#x60;. The body is the same bare array either way; when more remain, the response carries a &#x60;Link: &lt;...&gt;; rel&#x3D;\&quot;next\&quot;&#x60; header whose target is this request with the next page&#39;s &#x60;after_created&#x60; and &#x60;after_id&#x60; (and the caller&#39;s own filters and &#x60;order&#x60;), and the header is absent on the last page and on every response without &#x60;limit&#x60;. A &#x60;limit&#x60; of 0 or above the server ceiling &#x60;MAX_ARTIFACT_PAGE_ROWS&#x60; is refused, not clamped. Without &#x60;limit&#x60;, returns the whole list: the unbounded form, which a later release retires.
     # @param id [String] Resource ID
     # @param [Hash] opts the optional parameters
     # @option opts [String] :kind Filter by the bare family name (e.g. &#x60;\&quot;measurement\&quot;&#x60;).
     # @option opts [String] :intent Filter by selection intent: &#x60;\&quot;current\&quot;&#x60;, &#x60;\&quot;member\&quot;&#x60;, or &#x60;\&quot;pinned\&quot;&#x60;.
     # @option opts [Boolean] :include_folded Include folded (superseded) artifacts in the result. Default: &#x60;false&#x60;.
-    # @option opts [Boolean] :counts Return per-family counts instead of full artifacts. No content hydration. Default: &#x60;false&#x60; (full artifacts with content).
+    # @option opts [Boolean] :counts Return per-family counts instead of full artifacts. No content hydration. Default: &#x60;false&#x60; (full artifacts with content). Counts are not paged: &#x60;limit&#x60; and &#x60;after_*&#x60; are not read when this is set.
+    # @option opts [Integer] :limit Return at most this many artifacts. The body is still the bare array; when more remain, the response carries a &#x60;Link: &lt;...&gt;; rel&#x3D;\&quot;next\&quot;&#x60; header whose target is this request with the next page&#39;s position, and the header is absent on the last page. Must be at least 1 and at most the server ceiling &#x60;MAX_ARTIFACT_PAGE_ROWS&#x60;, which is 200; a value outside that range is refused, never clamped. Omit it to receive the whole list (the unbounded form, which a later release retires).
+    # @option opts [Time] :after_created Continue after this position: the &#x60;after_created&#x60; of the previous page&#39;s &#x60;Link&#x60; target. Send together with &#x60;after_id&#x60;, and only with &#x60;limit&#x60;.
+    # @option opts [String] :after_id Continue after this position: the &#x60;after_id&#x60; of the previous page&#39;s &#x60;Link&#x60; target. Send together with &#x60;after_created&#x60;, and only with &#x60;limit&#x60;.
+    # @option opts [SortOrder] :order The direction of a bounded read over &#x60;(created, id)&#x60;: &#x60;asc&#x60;, oldest first, or &#x60;desc&#x60;, newest first. Absent is &#x60;asc&#x60;. Only with &#x60;limit&#x60;; the &#x60;Link&#x60; target carries it, so every page continues in the direction the first was asked in. Any other value is refused.
     # @option opts [String] :x_temper_surface The calling surface, for event-ledger attribution. Accepted values are &#x60;cli&#x60; and &#x60;sdk&#x60;; an absent or unrecognized value attributes the write to &#x60;web&#x60;. This is provenance, never authorization — an unrecognized value degrades, it never rejects.
     # @return [Array<(Array<ArtifactView>, Integer, Hash)>] Array<ArtifactView> data, response status code and response headers
     def list_artifacts_with_http_info(id, opts = {})
@@ -279,6 +362,10 @@ module Temper::Generated
       if @api_client.config.client_side_validation && id.nil?
         fail ArgumentError, "Missing the required parameter 'id' when calling DataArtifactsApi.list_artifacts"
       end
+      if @api_client.config.client_side_validation && !opts[:'limit'].nil? && opts[:'limit'] < 1
+        fail ArgumentError, 'invalid value for "opts[:"limit"]" when calling DataArtifactsApi.list_artifacts, must be greater than or equal to 1.'
+      end
+
       allowable_values = ["cli", "sdk"]
       if @api_client.config.client_side_validation && opts[:'x_temper_surface'] && !allowable_values.include?(opts[:'x_temper_surface'])
         fail ArgumentError, "invalid value for \"x_temper_surface\", must be one of #{allowable_values}"
@@ -292,6 +379,10 @@ module Temper::Generated
       query_params[:'intent'] = opts[:'intent'] if !opts[:'intent'].nil?
       query_params[:'include_folded'] = opts[:'include_folded'] if !opts[:'include_folded'].nil?
       query_params[:'counts'] = opts[:'counts'] if !opts[:'counts'].nil?
+      query_params[:'limit'] = opts[:'limit'] if !opts[:'limit'].nil?
+      query_params[:'after_created'] = opts[:'after_created'] if !opts[:'after_created'].nil?
+      query_params[:'after_id'] = opts[:'after_id'] if !opts[:'after_id'].nil?
+      query_params[:'order'] = opts[:'order'] if !opts[:'order'].nil?
 
       # header parameters
       header_params = opts[:header_params] || {}

data/lib/temper/generated/api/events_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/facets_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/graph_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/health_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/ingest_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/invitations_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0

data/lib/temper/generated/api/invocations_api.rb

@@ -3,7 +3,7 @@
 
 #Knowledge base management API for temper cloud
 
-The version of the OpenAPI document: 0.6.2
+The version of the OpenAPI document: 0.6.3
 
 Generated by: https://openapi-generator.tech
 Generator version: 7.23.0